A recent wave of attacks targeting SonicWall customers has researchers and authorities on alert. Many victim organizations had misconfigurations in their systems.

Sonu Shankar, President at Phosphorus

Two major hacking groups have pushed the bureau to adapt how they respond to stealthier, more patient attacks, a top FBI official said.

The company is ahead of pace, disclosing about 100 more vulnerabilities at this point in the year than it did in 2024, according to a researcher.

Cybercrime hubs in Southeast Asia scammed Americans out of at least $10 billion last year, a 66% increase from 2023, officials said.

The company said a threat actor accessed and snooped around its account for months, then stole OAuth tokens for Drift integrations from its cloud environment.

The agency will consider streamlining the CIRCIA rule and finding ways to deconflict with other cyber regulations.

Cynthia Kaiser Sr. Vice President of Halcyon’s Ransomware Research Center

Artificial intelligence was a recurring theme among federal leaders who spoke at a GDIT event held Thursday.

The actively exploited defect, triggered by an attacker’s use of a publicly available sample machine key, underscores the vendor and customers’ poor configuration practices.